Privacy policy

Data controller

The controller of personal data is CAR & GO Sp. z o.o., Wiejska 12/3, 00-490 Warsaw, VAT ID PL7011315538.

For anything concerning personal data write to info@carngo.eu or call 790 511 580. We have not appointed a data protection officer, as we are not required to.

What we collect

• Data from the contact form and from car enquiries: name, e-mail address or phone number, and the message together with the dates and the car you picked and, in the insurance calculator, the number of drivers, the driver's year of birth and whether you plan to drive abroad
• Data from the booking form: full name, e-mail address, phone number, dates, hand-over times and place, notes, and the driver's year of birth when the booking includes rental insurance or a car with a minimum driver age
• Data from e-mail and phone conversations, where you give it to us yourself
• Technical data recorded by the server in the access logs: IP address, date and time of the request, browser type
• Data needed to conclude and settle the rental contract, collected off the site: ID card and driving licence details, invoicing details

Why, and on what legal basis

How long we keep it

• Enquiries that did not lead to a contract: up to a year from the last contact
• Rental contract data: for the term of the contract and until claims are time-barred
• Invoices and accounting records: five years from the end of the tax year, as the law requires
• Server logs: no longer than twelve months
• Statistics in Google Analytics 4: fourteen months

Who processes it for us

We do not sell data and do not share it for marketing. We entrust it only to those who work for us and on our terms:

• The hosting provider running the site and the mailbox: [TO BE COMPLETED: hosting provider name and address]
• Our accountants, for accounting records
• The insurer and the assistance company, in case of damage
• Public authorities, where the law requires it

Cookies

Essential cookies remember the chosen language and your decision in the consent banner (the carngo_consent cookie, valid for 12 months). These cannot be switched off, because the page will not work properly without them.

Analytics (Google Analytics 4) and marketing cookies are set only with the consent you give in the banner. Until you do, the Google Analytics script sends only cookieless signals without browser identifiers (Google consent mode), which do not allow a visitor to be recognised. Google marketing cookies (_gcl_*) measure ad effectiveness; the provider is Google Ireland Limited and they are valid for up to 90 days.

You can change or withdraw consent at any time with the “Cookie settings” link in the footer. Withdrawal does not affect the lawfulness of processing before it.

The map on the contact page loads only after you click it, so that your browser does not reach an external service without your decision.

Google Analytics 4

With your consent we use Google Analytics 4, a visit statistics tool. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics sets the _ga and _ga_* cookies, which tell visits and browsers apart. They are valid for up to two years unless you delete them earlier or withdraw consent (we then delete them ourselves).

The purpose is purely statistical: which pages and cars are viewed, where visitors come from and whether the forms work. We never send your name, phone number, e-mail address, year of birth or message content to Google Analytics.

We keep Google Analytics data for fourteen months. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with the “Cookie settings” link in the footer.

Google may also process data in the United States. Google LLC takes part in the EU-U.S. Data Privacy Framework, covered by a European Commission adequacy decision.

Your rights

You have the right to access your data, to rectify, erase or restrict its processing, to data portability, and to object to processing based on our legitimate interest.

A request sent to info@carngo.eu is enough. We answer within a month. If you believe we process data unlawfully, you may complain to the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.

Transfers outside the European Economic Area

We do not ourselves transfer data outside the European Economic Area. The exception is statistics from Google Analytics 4, collected with your consent, which Google may process in the United States as described in the “Google Analytics 4” section.

Providing your data

Providing data is voluntary, but without an e-mail address or a phone number we cannot answer an enquiry, and without the document details we cannot conclude a rental contract.

Changes to this policy

We update the policy when the way the site works changes. The date of the last change is at the bottom of this page.